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Abstract — A general class of polynomial remainder codes is 
considered. Such codes are very flexible in rate and length and 
include Reed-Solomon codes as a special case. 

As an extension of previous work, two joint error-and-erasure 
decoding approaches are proposed. In particular, both the de- 
coding approaches by means of a fixed transform are treated in 
a way compatible with the error-only decoding. In the end, a 
collection of gcd-based decoding algorithm is obtained, some of 
which appear to be new even when specialized to Reed-Solomon 
codes. 

I. Introduction 

Polynomial remainder codes, constructed by means of the 
Chinese remainder theorem, were proposed by Stone (JJ, 
who also pointed out that these codes include Reed-Solomon 
codes [2] as a special case. Variations of Stone's construction 
were studied in (3}-||5j, but no efficient decoding algorithm 
for random error was presented in these papers. There is 
also a connection between Goppa |6} codes and polynomial 
remainder codes, as noted in (9). 

In 1988, Shiozaki (7) proposed an efficient error-only de- 
coding algorithm for Stone's codes constructed by irreducible 
moduli (9). However, the algorithm is restricted to codes with 
a fixed symbol size, i.e., fixed-degree moduli. This restriction 
was overcome by the decoding algorithms in (SJ, J5J, which 
explicitly work for codes with variable symbol sizes, i.e., 
variable-degree moduli. Note that by admitting moduli of dif- 
ferent degrees, a Reed-Solomon code can be easily lengthened 
by adding some higher-degree symbols without increasing the 
size of the underlying field (SJ, (9). Note also that Shiozaki's 
algorithm, when applied to Reed-Solomon codes, is the same 
as Gao's (TO) algorithm as pointed out in (9), (TTJ, (12) . 

In presence of both error and erasures, the error-only 
decoding algorithm, as observed by Shiozaki [7], can be ap- 
plied to shortened polynomial remainder codes interpolated by 
ignoring the erased symbols. Such an interpolation, however, 
involves a lot of re-computation of the interpolating basis and 
thus greatly increases the decoding complexity. When applied 
to Reed-Solomon codes, the same problem exists, as pointed 
out in [12|, but for Reed-Solomon codes, the problem can be 
bypassed by the decoding algorithm of (T2J. 

In this paper, we consider the extension of the error-only 
decoding algorithms of (SJ, (9) to joint error-and-erasure de- 
coding of irreducible polynomial remainder codes. Two fixed- 
transform approaches are proposed for decoding such codes. 



When applied to Reed-Solomon codes, the first approach 
is essentially identical to the one in (12| , but the second 
approach appears to be new. For each approach, the decoding 
algorithm consists of two steps: in the first step, a polynomial 
which factorizes the error locator polynomial is computed by 
means of a gcd algorithm; in the second step, the message is 
recovered, for which we also propose two different methods. 

The paper is organized as follows. In Section [TTJ we 
recall the Chinese remainder theorem and the definition of 
irreducible polynomial remainder codes. In Section 



III 



address the problem of joint error-and-erasure decoding and 
propose two fixed-transform decoding approaches. In Sec- 
tions IV and[V] we derive gcd-based decoding algorithms for 
the respective approaches. A collection of these algorithms is 



summarized in Section VI Section VII concludes the paper. 



II. Irreducible Polynomial Remainder Codes 

In this section, we quickly recall the Chinese remainder 
theorem, the definition of irreducible polynomial remainder 
codes, and some basic properties of such codes as in |8], (9). 

Let R = F[x] be the ring of polynomials over some field 
F. For any monic polynomial m(x) <E F[x], let R m denote 
the ring of polynomials over F of degree less than deg m(x) 
with addition and multiplication modulo m(x). 

A. CRT Theorem and Polynomial Remainder Codes 

Theorem 1 (Chinese Remainder Theorem). For some 
integer n > 1, let mo(x), mi(x) ) . . . , m n _i(x) € R be rel- 
atively prime polynomials, and let M n (x) = YIa=o m i( x )- 
The mapping 

"0 : -Rm„ — > Rm Q X ... X Rm n '■ 

a(x) i-> ip(a) = (ip (a), . . ., Vn-i(a)) (1) 

with ipi(a) = a(x) mod m^i) is a ring isomorphism. The 
inverse mapping is 

n-l 

ip' 1 : (cq, • ■ • ,c n _i) i-> a(x)/3i(x) mod M n (x) (2) 



i=0 



with coefficients 



M n {x) _ fMjxY 
rrn{x) \mi{x) J nwdmz(x) 



(3) 



where (b(x)) 



mod rrii (x) 



denotes the inverse of b(x) in R mi . □ 



Definition 1. An irreducible polynomial remainder code over 
F[x] is a set of the form 

C = {(c , . . . , c„_i) = tp(a) for some a(x) € R Mk } (4) 

where n and k are integers satisfying 1 < k < n, where 
mo(x),mi(x), . . . ,m n ^i(x) £ F[x] are different monic irre- 
ducible polynomials, and where Mj~(x) = Yli=o m i{ x )- n 

B. Distance and Error Correction 

Let C be a code as in Definition [T] Let y = c + e denote a 
corrupted codeword that the receiver gets to see, where c € C 
is the transmitted codeword corresponding to some a(x) E 
R,M k by Q, and where e is an error pattern. 

For any a(x) e -Ra/„, the degree weight of '(/'(a) = 
(ipo(a), . . . ,-0 n -i(a)) is 



w D (V>(a)) = 2^ degm^z). 

i:V>i(a)/0 



(5) 



For any a(x),6(x) € i?A/„, the degree-weighted distance 
between ip(a) and ?/;(&) is 



<1dWo),#))=wdWo)-#)). 



Let 



and 



n-l 



= deg M n (a;) = ^ de § m * ( x ) 



fe-i 

K = deg M k (x)=J2 

i=0 



deg mi(x). 



(6) 



(7) 



(8) 



Then, the degree weight of any nonzero codeword ip(a) 
(a(x) G B,M k , a(x) ^ 0) satisfies 

wdCV'(o)) >N-K (9) 
and the minimum degree-weighted distance of C satisfies 

GminD 

(C)> N- K. (10) 

If C also satisfies the Ordered-Degree Condition 

degmo(ir) < degmi(a;) < . . . < degm n _i(i), (11) 

then the Hamming weight of any nonzero codeword ip( a ) 
(a(x) G R-M k , a(x) 7^ 0) satisfies wn('0( a )) > n — k + 1 and 
the minimum Hamming distance of C is d m } n H (C)=n-k+l. 

An error-only decoding algorithm, which is guaranteed 
to correct all the error patterns of wo(e) < d m ; n D/2 and 
also the error patterns of wjj(e) < d m ; n H/2 if the code 
satisfies ( (IT) , was proposed in (8j, |9j to deal with the error 
e = (eo, ei, . . . , e n _i) with unknown error positions (i.e. 
e% 7^ 0, < i < n — 1, are unknown). Moreover, an efficient 
interpolation formula was also proposed in |8), J5J to recover 
a (a;) from y = c + e when the positions i of e, 7^ are all 
known. 

In the following, we consider the problem where only some 
(rather than all) positions i of e; 7^ are known before 
decoding. 



III. Error-and-Erasure Decoding 

In this section, we present three possible approaches to joint 
error-and-erasure decoding of the code C as in Definition [T] 

Let y = c + e denote a corrupted codeword, where c = 
(c ,ci, . . .,c n _x) e C and where e = {e ,e x , . . . ,e„_i) is 
an error pattern. Let S e C {0, 1, . . . , n — 1} denote the set of 
positions i of e; 7^ 0. Let S p C S e denote the set of known 
positions i of 7^ and let S T = S e \ S p denote the set of 
the unknown positions i of 7^ 0. 

A. A Modified-Transform Approach 

A first approach, as observed by Shiozaki (7), is to reduce 
the joint error-and-erasure decoding of such codes to the error- 
only decoding of the shortened codes. Specifically, let S = 
{0, l,...,n - 1} \ S p , let M s (x) = ]\ i£S m l {x), and let 
® ies denote the direct product of the rings R„ H with 
i G S. Moreover, let c = {c;} with i E S, i.e., c is the 
shortened codeword of c. It then follows from Theorem 1 that 
the mapping cf) : R Ms — > ® igS R mi is a rm g isomorphism. 
The inverse mapping is 

: c i-> Ci(x)/3i(x) mod M s (a;) 
with interpolating basis 



(12) 



M S W /M s (x) 



(13) 



mod m 



(x) 



We can then use the error-only decoding algorithms as in (8), 
1 9 1 to decode c. This approach requires, however, a lot of re- 
computation of ( p"3j ) and thus greatly increases the decoding 
complexity, as the case for Reed-Solomon codes fT2) . 

In the following two subsections, we propose two other 



approaches which avoid the re-computation (13 1 and use the 
fixed transform ip -1 and the fixed fii(x) in (|2|) and (5V 

B. A Fixed-Transform Approach I 

Recall that y = c + e. Let = a(x) + E(x) denote 

the pre-image ^p~ 1 (y) of y with if) -1 as in (Kb, where a(x) = 
?A _1 (c) of dega(x) < K and where = "Y^^q E^x^ 

denotes the pre-image ^ _1 (e) of e. 

Let 



(14) 



be the unique monic error locator polynomial of the smallest 
degree degA e (x) = w D (e) M, (9). With 



a p( x ) = n m i( x ) 



ies„ 



and 



(15) 



(16) 



( 14 1 can then be written as A e (x) = A p (x)A T (x), and the key 



equation in Theorem 6 of J8) can be written as 

A{x)M n {x) = A p (x)A T (x)E(x) 



(17) 



Now let 



and 



E(x) = A p {x)E{x). 



(18) 
(19) 

(20) 



Y(x) = A p (x)Y(x) = A p (x)a(x) + E(x). 
Theorem 2. The polynomial ( [T6| satisfies 

A(x)M n (x) = A T (x)E(x) 

for some polynomial A(x) £ F[x] of degree smaller than 
degA e (:r) = A p (x) + A T (x). Conversely, if some polynomial 
G(x) £ F[x] satisfies 

A(x)M n (x) = G{x)E{x) (21) 

for some A(x) £ F[x], then G(x) is a multiple of A T (x). □ 

Theorem 3 (Fixed-Transform Interpolation). If G(x) is a 

multiple of A T (x) with 



then 



degG{x) <N-K- deg A p (x), 
Y(rr.)ntx) mnri M 

a(x) 



Y(x)G(x) mod M n (x) 
A p (x)G(x) 



(22) 



(23) 
□ 



Theorems [2] and [3] follow easily from Theorems 6 and 7 of |8|. 
Since A p (x) is given, (23 1 implies that a(x) can be computed 



immediately once A T (x)is known. 
C. A Fixed-Transform Approach II 

Recall that M n {x) = JJ^ m,(x). Let 

M n {x) = M n (x)/A p (x), (24) 

which is of degree degM n (a;) = N — degA p (x). We then 
have the following analog of Theorems [2] and [3] 

Theorem 4. The polynomial ( [To*} satisfies 

A(x)M n (x) = A T (x)E(x) (25) 

for some polynomial A(x) £ F[x] of degree smaller than 
degA e (a;) = A p (x) + A T (x). Conversely, if some polynomial 
G(x) £ F[x] satisfies 

A(x)M n {x) = G{x)E{x) (26) 

for some A(x) £ F[x], then G(x) is a multiple of A T (x). □ 

Theorem 5 (Fixed-Transform Interpolation). If G(x) is a 

multiple of A T (x) with 



then 



degG(x) < N-K- deg A p (x), 
Y{x)G{x) mod M n (x) 



a(x) 



G(x) 



(27) 



(28) 

□ 



The two theorems follow also easily from Theorems 6 and 7 



of |8j. From (28 1, a(x) can be computed immediately once 
A T (x) is known. 

In the following two sections, we will investigate the use of 
a modified gcd algorithm to solve the modified key equations 
(f2Tb and d26>. 



IV. Solving ( |2Tj ) by the Extended GCD Algorithm 

It is known that an extended gcd algorithm can be used to 
solve a key equation and compute an error locator polynomial 
(8), which is also one of the standard ways of decoding 
Reed-Solomon codes fl4). We now adapt this approach to 



solve the modified key equation (21 



A. An Extended GCD Algorithm 

In this subsection, we assume that E(x) ^ is fully known; 
in the next subsection, we state the modifications that are 
required when E(x) is only partially known. We prefer the 
following gcd algorithm (8), (9}. 

Extended GCD Algorithm I 

Input: M n (x) and E(x). 

Output: polynomials s(x) and t(x) £ F[x], cf. Theorem [6] 

1 r(x) := M n (x) 

2 r(x) := E(x) 

3 s(x) := 1 

4 t{x) := 

5 s(x) := 

6 t(x) := 1 

7 loop begin 

8 i := degr(a:) 

9 j := degf(x) 

10 while i > j begin 

11 q{x):=^x i -^ 

12 r(x) := r(x) — q(x) ■ r(x) 

13 s(x) := s(x) — q(x) ■ s(x) 

14 t(x) := t(x) - q(x) ■ t(x) 

15 i := degr(x) 

16 end 

17 if degr(x) = begin 

18 return s(x), t(x) 

19 end 

20 (r(x),r(x)) := (r(x),r(x)) 

21 (s(x),s(x)):=(s(x),s(x)) 

22 {t(x),t(x)) ;= (t(x),t(x)) 

23 end n 

It is easily verified that the standard loop invariant [14| holds 
also for this gcd algorithm: 

r{x) = s(x) ■ M n (x) + t(x) ■ E(x) (29) 

holds between lines [9] and [10] and between lines [16] and [17] 

Theorem 6 (GCD Output). When the algorithm terminates, 
we have both 



and 



s(x) ■ M n (x) + t(x) ■ E(x) = 0. 
t(x) = 7A r (x) 



for some scalar 7 £ F. 



(30) 

(31) 

□ 



In fact, E(x) 7^ is not fully known, but with the 
modification in the following subsection, the Extended GCD 
Algorithm I can be still used to compute t(x) — jA T (x). 



B. Modifications for Partially Known E(x) 

Recall that Y{x) = a(x) + E(x). Since dega(:r) < K 
the receiver knows the coefficients Ejc, Ek+i, ■ ■ ■ , £jv-i of 
E(x). It follows from ([18]) and (TT9]> that the upper N - K 



coefficients of E(x), obtained from Y{x), are also known, 
which can then be used to compute t(x) = jA T (x) as follows. 

Partial GCD Algorithm I 

Input: M n (x) and Y(x). 

Output: r(x), s(x),t(x), cf. Theorem [7] below. 

The algorithm is the same as the Extended GCD Algorithm I 




of Section |IV-A| except for the following changes: 

= Y(x) 

if degr(a;) < degt(x) + deg A p (x) + K begin (32) 
or alternatively 

if degr(x) < (N + K + deg A p (x))/2 begin (33) 

□ 

Theorem 7. If A T (x) satisfies 

deg A T (x) <{N-K- deg A p )/2, (34) 



then the Partial GCD Algorithm I (with either (|32j) or ( |33| l) 
returns the same polynomials s(x) and t(x) (after the same 
number of iterations) as the Extended GCD Algorithm I of 



Section IV-A Moreover, the returned r(x) is such that 
r(x) = t(x)A p (x)a(x). 



(35) 



Note that a(x) can be recovered directly from (35 1 



V. Solving a26h by the Extended GCD Algorithm 



A. An Extended GCD Algorithm 

The following Extended GCD Algorithm II, which is fully 
described for clarity and ease of reference, is the same as the 



Extended GCD Algorithm I in Section IV-A except having 



different input polynomials. We first assume that E(x) ^ 
is fully known, and then in the next subsection, we state the 
required modifications when E(x) is partially known. 

Extended GCD Algorithm II 

Input: M„{x) and E{x). 

Output: polynomials s(x) and t(x) € F[x\. 

1 r(x) := M n (x) 

2 r(x) := E{x) 

3 s{x) := 1 

4 t(x) := 

5 s(x) := 

6 t(x) := 1 

7 loop begin 

8 i := degr(x) 

9 j := degf(cc) 

10 while i > j begin 



11 

12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 



q(x) := ^ x i-i 
r(x) := r(x) — q(x) ■ r(x) 
s(x) := s(x) — q(x) ■ s(x) 
t(x) := t{x) — q(x) ■ t(x) 
i := degr(cc) 

end 

if degr(x) = begin 
return s(x), t(x) 
end 

(r(x),f(x)) := (r(x),r(x)) 
(s(x),s(x)) := (s(x),s(x)) 
(t(x),t{x)) := (t(x),t(x)) 



end 



For this algorithm, the loop invariant 

r(x) = s(x) ■ M n {x) + t(x) ■ E(x), 



□ 



(36) 



holds between lines |9] and [10] and between lines [16] and [T7] 

Theorem 8 (GCD Output). When the algorithm terminates, 
we have both 



and 



s(x) ■ M n (x) + t(x) ■ E(x) 
t{x) = jA T (x) 



0. 



for some scalar 7 € F. 

B. Modifications for Partially Known E{x) 

Recall that the known coefficients Ek, Ek+i, 
E(x) can be obtained from Y(x). 



(37) 

(38) 

□ 

,-Ejv-i of 



Partial GCD Algorithm II 

Input: M n {x) and Y(x). 

Output: r(x), s(x),t(x), cf. Theorem [9] below. 

The algorithm is the same as the Extended GCD Algo- 
rithm II of Section fV-A| except for the following changes: 



Line 
Line 



2] f(x) := Y{x) 
W 



if degr(x) < degt(x) + K begin 
or alternatively 



(39) 



if degr(x) < ( N + K - deg A p (x))/2 begin (40) 



□ 



Theorem 9. If the condition ((34]) is satisfied, then the Partial 
GCD Algorithm II (with either |39]l or (|40]i) returns the 
same polynomials s(x) and t(x) (after the same number of 



iterations) as the Extended GCD Algorithm II of Section V-A 
Moreover, the returned r(x) is such that 



r(x) — t(x)a(x). 



(41) 

□ 



Note that a(x) can be recovered directly from (41 1 



VI. Summary of decoding 

Let us summarize the proposed decoding algorithm and add 
some details. The receiver sees y = c + e where c <G C is 
the transmitted codeword and e is an error pattern. We thus 
have Y(x) = a(x) + E(x) where Y{x), a(x), and E(x) are 
the images of y, c, and e under the fixed transform ip^ 1 and 
dega(a;) < K. 

A. Decoding using Fixed-Transform Approach I 

By Fixed-Transform Approach I, we first compute Y{x) 
from (|T9]», and then run the Partial GCD Algorithm I. If p4| ) 
is satisfied, then the algorithm yields s(x), t(x) and r(x) that 
satisfy (30 1, (31 1 and (35 1. We can then recover a(x) by either 
of the following methods: 

1) From |23|, we have 

_ t(x)Y(x) modM n (x) 
[ ' t(x)A p (x) { * Z) 



(with the recovery of a(x) either by (44 > or by (45 1) is of the 



(If the numerator of (42 1 is not a multiple of t(x)A p (x) 



or if deg a(x) > K, then decoding failed due to some 
uncorrectable error.) 
2) We can compute 



a(x) 



r(x) 



(43) 



t(x)K p (x) 
according to ( |35] l. 

(If t(x)A p (x) does not divide r(x) or if dega(ir) > K, 
we declare a decoding failure.) 
When applied to Reed-Solomon codes, Approach I with the 



recovery of a(x) by (43 1 is identical to the algorithm proposed 
in [12], but recovering a(x) by (42 1 is new. 



B. Decoding using Fixed-Transform Approach II 

By Fixed-Transform Approach II, we first compute M n (x) 



from (|24}, and then run the Partial GCD Algorithm II. If ( |34| ) 
is satisfied, then the algorithm yields s(x), t(x) and r(x) that 
satisfy (37 i, (38 i and (41 1. We can then recover a(x) by either 



of the following methods: 
1) From d28|, we have 



a(x) = *(*)n*)™dM B (s) (44) 



(If the numerator of (44 > is not a multiple of t[x) or 



if dega(x) > K, then decoding failed due to some 
uncorrectable error.) 
2) We can compute 



a(x) = 



r(x) 

W) 



(45) 



according to ( |4T| >. 

(If t(x) does not divide r(x) or if dega(x) > K, we 
declare a decoding failure.) 
Note that Approach II appears to be new even when applied 
to decoding Reed-Solomon codes. Note also that Approach II 



same form as the error-only decoding of 191. 

In comparison with Approach I, the gcd algorithm of 
Approach II requires less computation since the input poly- 
nomials M n {x) and Y(x) of the Partial GCD Algorithm II 
have degrees smaller than the inputs M n (x) and Y(x) of the 
Partial GCD Algorithm I. 

VII. Conclusion 

We have extended previous work of the error-only decoding 
of irreducible polynomial remainder codes to the joint error- 
and-erasure decoding of such codes, for which we have pro- 
posed two fixed-transform approaches. As we have shown, for 
each approach, the joint error-and-erasure decoding is carried 
out by an efficient gcd algorithm, and is fully compatible in 
implementation with the error-only decoding. Of particular 
interest is the second approach, which appears to be new even 
when specialized to Reed-Solomon codes. 
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